Lucene search
Google_androidCVELIST:CVE-2022-20480HistoryDec 13, 2022 - 12:00 a.m.
CVE-2022-20480
2022-12-1300:00:00
google_android
www.cve.org
notificationchannel
permissions
settings
resource exhaustion
local privilege escalation
android-10
android-11
android-12
android-12l
android-13
a-241764350
vulnerability
0.0004 Low
EPSS
Percentile
5.1%
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-241764350
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2022-20480
2022-12-13 16:15:16
ubuntucve
ubuntucve
CVE-2022-20480
2022-12-13 00:00:00
nvd
nvd
CVE-2022-20480
2022-12-13 16:15:16
prion
prion
Code injection
2022-12-13 16:15:00
